Information Security & Data Protection Officer (ISO/DPO)

Company Description

BlackBull Markets is a multi-regulated, multi-asset broker headquartered in Auckland, New Zealand, operating across five global jurisdictions. We combine fast execution, 24/7 customer support, and access to over 26,000 tradable instruments to serve traders at every level. Team members join a company focused on performance, reliability, and continuous improvement in financial technology.

Role Description

The Information Security & Data Protection Officer supports and enhances our information security and privacy function, aligning ISO 27001 security practice with GDPR and regional data protection compliance across multiple jurisdictions.

This is a combined role covering both information security and data protection, sitting close to IT, Compliance, and our regulators across the business.

What you will do

• Information security: support and maintain the ISMS aligned to ISO 27001, conduct risk assessments and control testing, and assist with audits and certification activity
• Data protection: ensure compliance with GDPR, UK GDPR, and other applicable regulation, maintain Records of Processing Activities, conduct DPIAs, and manage data subject rights and breach response
• Governance, risk, and compliance: support compliance across multiple regulators including the FCA, ASIC, and FMA, manage third-party and vendor risk, and deliver training and awareness programmes.

What you bring

• 2+ years experience in security, risk, or data protection
• Knowledge of ISO 27001 and GDPR
• Experience in a regulated environment, financial services or trading preferred
• Strong communication and stakeholder skills.

Nice to have

ISO 27001 certification experience, exposure to OneTrust or a similar tool, cloud knowledge (Azure, AWS), or certification such as ISO 27001 Lead Implementer, CIPP/E, or CIPM.

Why this role

You will own a function that matters to regulators and customers alike, with genuine influence over security and privacy decisions in a multi-jurisdiction fintech.

To apply

Apply through LinkedIn or reach out to our talent team directly.